[For your protection, some features and settings discussed in this documentation may be controlled by your security administrator.]

To gain more control over how Forefront Endpoint Protection handles detected threats, use the Default actions or the Threat handling tab, depending on your product version.

  1. Click the Settings tab, and then select the Default actions tab.

  2. Select the action that you want to apply to each alert level.

  3. Select the Apply recommended actions check box, and then click Save changes. If you're prompted for an administrator password or confirmation, type the password or confirm the action.

To learn more about applying default actions, see Applying default actions to detected items.